Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/1/34352e362e3136322e302f32342d3234203d3e20323636313936.roa
File:                     34352e362e3136322e302f32342d3234203d3e20323636313936.roa (raw, json)
Hash identifier:          MpkACIAWQMclkaEIDiEnQEYcLXaHHnMV8YsJN9bh/M8=
Subject key identifier:   CA:08:19:ED:7E:8C:D9:5F:91:55:D8:30:9E:8C:76:EF:9F:7F:0D:61
Certificate issuer:       /CN=540DD83FF1692B2072A8312F529D6865CBB50CCE
Certificate serial:       5E3BA24A4749E06F4D00B652E22A34B561B2F266
Authority key identifier: 54:0D:D8:3F:F1:69:2B:20:72:A8:31:2F:52:9D:68:65:CB:B5:0C:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/540DD83FF1692B2072A8312F529D6865CBB50CCE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/1/34352e362e3136322e302f32342d3234203d3e20323636313936.roa
Signing time:             Sun 07 Apr 2024 22:13:40 +0000
ROA not before:           Sun 07 Apr 2024 22:08:40 +0000
ROA not after:            Sun 06 Apr 2025 22:13:40 +0000
asID:                     266196
IP address blocks:        45.6.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:3b:a2:4a:47:49:e0:6f:4d:00:b6:52:e2:2a:34:b5:61:b2:f2:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=540DD83FF1692B2072A8312F529D6865CBB50CCE
        Validity
            Not Before: Apr  7 22:08:40 2024 GMT
            Not After : Apr  6 22:13:40 2025 GMT
        Subject: CN=CA0819ED7E8CD95F9155D8309E8C76EF9F7F0D61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:17:ba:9d:73:13:e9:47:11:9f:4e:aa:6c:a0:
                    75:53:dd:ba:74:f7:ad:cd:27:f5:b2:e0:fa:7a:39:
                    50:65:ea:3a:15:96:cb:ff:2f:64:39:2a:ea:90:e8:
                    d2:2c:04:56:eb:c5:74:dc:72:4e:15:25:e5:b0:37:
                    12:c9:11:37:a7:10:3e:32:b9:b0:38:a0:2f:9c:8b:
                    7e:6d:4c:fd:ae:77:a9:47:25:3b:e3:a9:00:40:bf:
                    2f:db:c8:72:b7:4e:6e:8b:d9:f9:10:fb:88:06:39:
                    0e:fc:2a:a4:ef:d0:00:8a:bb:e9:a3:bc:60:66:40:
                    eb:a3:af:46:19:a3:5c:2c:a8:f5:8d:27:01:2a:e5:
                    00:2e:31:ea:80:43:17:95:9c:2f:dd:15:9e:99:24:
                    cf:04:35:a7:91:e2:74:cc:5a:9c:0f:3b:e0:60:d4:
                    ed:b6:69:0c:ce:90:c8:87:d9:3b:e1:c3:c7:a4:0e:
                    e8:66:36:72:f7:85:1e:71:82:08:7d:1b:8d:1d:88:
                    4f:63:44:66:51:d1:b6:6a:c7:16:fd:4f:0d:a6:15:
                    67:3b:d9:34:93:ff:69:70:30:cf:48:3b:15:07:92:
                    72:60:f4:14:0d:2c:25:d0:c7:3a:6c:ab:e8:4b:bd:
                    13:9b:dc:9f:3a:0c:70:4f:88:eb:2c:af:3d:fb:a1:
                    86:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:08:19:ED:7E:8C:D9:5F:91:55:D8:30:9E:8C:76:EF:9F:7F:0D:61
            X509v3 Authority Key Identifier:
                keyid:54:0D:D8:3F:F1:69:2B:20:72:A8:31:2F:52:9D:68:65:CB:B5:0C:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/1/540DD83FF1692B2072A8312F529D6865CBB50CCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/540DD83FF1692B2072A8312F529D6865CBB50CCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/1/34352e362e3136322e302f32342d3234203d3e20323636313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:b9:5a:6e:57:0b:fa:22:c7:25:76:69:84:9f:a1:a9:61:11:
         db:ce:a0:0d:a4:d4:b5:a8:57:e6:49:ac:2a:0c:df:75:0a:29:
         0d:9b:33:5b:f6:28:9e:16:b4:42:eb:4d:20:01:0d:a5:67:96:
         38:0e:22:27:f4:9a:75:7b:9a:91:3d:e7:a4:ff:96:f9:e4:e1:
         b7:b8:42:ea:e2:98:ac:d9:0b:6a:f9:27:1c:98:a1:7c:da:59:
         dc:90:cd:ed:26:3c:5e:25:ef:92:58:e7:2d:22:e1:97:89:e7:
         73:1c:7b:a6:21:f2:9f:08:f7:2b:d0:d8:b0:09:58:ee:a8:52:
         af:e3:ee:5e:1f:d8:d9:ee:9d:79:70:17:34:71:6d:bf:fc:c4:
         aa:2e:6f:c5:fa:06:94:b8:41:43:72:fc:02:fe:a9:bf:30:e2:
         23:e6:3a:15:e7:77:7a:07:20:fe:16:89:a7:99:74:ae:c6:fd:
         c5:25:01:89:0b:62:b5:8b:52:93:3c:25:5e:b3:13:9c:50:ab:
         a6:b4:f5:ff:2d:e4:cf:d8:90:b8:06:57:a0:54:1b:d9:81:4b:
         64:b5:8c:b0:71:96:66:09:7f:8e:78:a0:07:41:8e:87:42:39:
         08:57:a6:55:84:ec:ff:e5:76:1a:43:d4:23:d8:8f:f3:9b:5c:
         8f:46:db:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org